SQL Injection in Infor Eclient

CVE-2011-1915

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.011 (63.1th percentile) — read the EPSS interpretation.

Affected products

Infor Eclient — versions 7.3.2.3
Infor Enspire_distribution_management_solution — versions 7.3.2.7
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)